Privacy Policy

Effective Date: 20 Feb 2026

This Privacy Policy describes how Stone Paper Stories, sole proprietorship registered at:

8 Tribune Colony Ambala Cantt Haryana, India – 133001

("Company," "we," "us," or "our") collects, uses, stores, and protects information when you use ChamChamExpress.com (the "Platform").

By using the Platform, you consent to the practices described herein.

1. Who This Policy Applies To

This Platform is intended for adults (18+), primarily parents and guardians.

We do not knowingly collect data from children.

If we become aware that a child has provided personal data, we will delete it immediately.

2. Information We Collect

We collect the following categories of information:

2.1 Information You Provide Directly

When you create an account or make a purchase:

  • Name
  • Email address
  • Account credentials
  • Purchase history

We do not directly collect phone numbers.

Phone numbers may be collected by Razorpay during payment processing, subject to their privacy policy.

2.2 Payment Information

Payments are processed securely via Razorpay.

We do not store:

  • Card numbers
  • CVV
  • Bank account details

Payment processors may store such information in accordance with their own policies.

2.3 Automatically Collected Information

When you use the Platform, we automatically collect:

  • IP address
  • Browser type
  • Device information
  • Usage behavior
  • Pages visited
  • Time spent on pages

This data is collected through:

  • Google Analytics
  • Meta Pixel
  • Cookies and tracking technologies

3. How We Use Your Information

We use your information to:

  • Provide access to purchased content
  • Process payments
  • Send transactional emails
  • Send updates about new releases and platform changes
  • Improve website performance
  • Prevent fraud and piracy
  • Enforce our Terms & Conditions

We do not sell personal data.

4. Legal Basis for Processing (GDPR Compliance)

If you are located in the European Economic Area (EEA), we process your data under the following lawful bases:

  • Performance of contract (account access and purchases)
  • Legitimate interests (platform improvement, anti-piracy enforcement)
  • Consent (marketing communications and cookies)

You may withdraw consent at any time.

5. Data Storage & Security

  • Account data is stored using Supabase infrastructure located in India.

We implement reasonable technical and organizational safeguards including:

  • Encrypted data transmission (HTTPS)
  • Secure authentication systems
  • Access controls

No system can be guaranteed 100% secure. By using the Platform, you acknowledge this risk.

6. Data Retention

We retain personal data:

  • For as long as your account remains active
  • As required by tax and legal obligations
  • As necessary for enforcement of intellectual property rights

You may request deletion of your account at any time.

7. Cookies & Tracking

We use cookies and similar technologies to:

  • Enable account functionality
  • Analyze traffic
  • Improve performance
  • Deliver relevant advertising

You may disable cookies through your browser settings. Disabling cookies may limit functionality.

8. Marketing Communications

If you create an account or make a purchase, we may send:

  • Product updates
  • New release announcements
  • Platform updates

You may unsubscribe at any time via the unsubscribe link in emails.

9. Sharing of Information

We may share data with:

  • Razorpay (payment processing)
  • Supabase (data hosting)
  • Google Analytics
  • Meta Platforms

We do not sell or rent personal information. We may disclose information:

  • To comply with law
  • To enforce intellectual property rights
  • To prevent fraud or piracy

10. International Users

If you access the Platform from outside India, you consent to transfer of your data to India for processing and storage. Data protection laws in your country may differ from those in India.

11. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your data
  • Correct inaccurate data
  • Request deletion
  • Restrict processing
  • Object to marketing
  • Request data portability

To exercise rights, email: chamcham@stonepaperstories.com

We may require identity verification.

12. Do Not Track Signals

The Platform does not respond to "Do Not Track" browser signals.

13. Third-Party Links

The Platform may contain links to third-party websites. We are not responsible for their privacy practices.

14. Changes to This Policy

We may update this Privacy Policy at any time. Updated versions will be posted with a revised Effective Date. Continued use of the Platform constitutes acceptance.

15. Contact

For privacy-related inquiries:

chamcham@stonepaperstories.com

hi@stonepaperstories.com